File _patchinfo of Package patchinfo.981
<patchinfo incident="981">
<issue id="938343" tracker="bnc">/usr/lib/polkit-1/polkit-agent-helper-1 libgcrypt linkage drops euid in FIPS mode, causing setuid root loss</issue>
<issue id="920057" tracker="bnc">CVE-2015-0837: libgcrypt, gpg: mitigations against side-channel attacks</issue>
<issue id="CVE-2015-0837" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<packager>vitezslav_cizek</packager>
<description>
This update fixes the following issues:
Security:
* Fixed data-dependent timing variations in modular exponentiation
[related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
are Practical] (bsc#920057)
Bugfixes:
* don't drop privileges when locking secure memory (bsc#938343)
</description>
<summary>Security update for libgcrypt</summary>
</patchinfo>